Privacy Policy
Last updated: 26.01.2026
This Privacy Policy describes how Content Bridge (“the App”, “we”, “our”, or “us”) collects, uses, and protects personal information when merchants install and use the App in connection with their Shopify stores.
1. Information We Collect
When you install and use the App, we may collect the following types of information:
a. Store Information
- Store name
- Store URL
- Store language and locale settings
b. App Configuration Data
- App settings configured by the merchant
- Product metafield values used for content matching
c. WordPress Connection Data
- WordPress REST API endpoint URL
- API authentication credentials (if provided by the merchant)
The App does not collect or store customer personal data such as names, email addresses, payment details, or order information.
2. How We Use Your Information
We use the collected information solely to:
- Provide and operate the App’s core functionality
- Fetch and display WordPress content on Shopify product pages
- Maintain and improve App performance and reliability
- Communicate with merchants regarding App updates or support inquiries
We do not sell, rent, or share your information with third parties for marketing or advertising purposes.
3. Data Storage and Security
- App-related data is stored securely using industry-standard security practices
- API credentials are stored in an encrypted format
- Access to stored data is limited to what is strictly necessary to operate the App
We take reasonable measures to protect your information from unauthorized access, disclosure, alteration, or destruction.
4. Data Retention
We retain collected data only for as long as the App is installed and actively used.
Once the App is uninstalled, all associated store and configuration data is deleted within a reasonable timeframe, unless retention is required by law.
5. Third-Party Services
The App communicates with the merchant’s WordPress site via the WordPress REST API.
Data exchanged between Shopify and WordPress is handled directly by the merchant’s configured endpoints.
We are not responsible for the privacy practices of third-party services, including WordPress installations managed by the merchant.
6. Merchant Responsibilities
Merchants are responsible for:
- Ensuring they have the right to access and display content from their WordPress site
- Informing their customers about how content is displayed on product pages
- Complying with applicable privacy laws and regulations in their jurisdiction
7. GDPR and EU Privacy Rights
If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, this section applies to you.
a. Legal Basis for Processing
We process personal data under the following legal bases as defined by the General Data Protection Regulation (GDPR):
- Contractual necessity – to provide and operate the App as requested by the merchant
- Legitimate interests – to maintain, secure, and improve the App
- Legal obligations – where required by applicable laws
The App does not process personal data beyond what is necessary to deliver its functionality.
b. Data Subject Rights
Under the GDPR, you have the following rights regarding your personal data:
- The right to access your personal data
- The right to request correction of inaccurate data
- The right to request deletion of your data (“right to be forgotten”)
- The right to restrict or object to data processing
- The right to data portability
To exercise any of these rights, please contact us using the details provided in the Contact Information section.
c. Data Minimization and Purpose Limitation
We collect and process only the minimum amount of data necessary to operate the App.
All data is used exclusively for the purposes described in this Privacy Policy and is not repurposed for unrelated activities.
d. International Data Transfers
If data is transferred outside of the European Union, we ensure that appropriate safeguards are in place in accordance with GDPR requirements, such as:
- Adequacy decisions by the European Commission, or
- Standard Contractual Clauses (SCCs), where applicable
e. Right to Lodge a Complaint
If you believe that your data protection rights have been violated, you have the right to lodge a complaint with your local data protection authority.
8. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in the App or legal requirements.
Any updates will be posted on this page, and the “Last updated” date will be revised accordingly.
9. Contact Information
If you have any questions about this Privacy Policy or the App’s data handling practices, please contact us at:
Email: content-bridge@vow.design
Website: https://vow.design